Find the best IT Security Consultants in Germany matched in minutes from 15,000 CVs with the power of AI
Covering security assessments, ISO 27001 work, cloud hardening, incident response, and secure architecture reviews, with fast and precise matching to vetted, available freelancers.
About the role
Security focus
An IT security consultant helps companies reduce risk across systems, networks, cloud services, and internal processes. The work often starts with a security review, threat analysis, or gap assessment, then moves into concrete measures that teams can implement.
- Security assessments and risk workshops
- Security architecture and control reviews
- Policies, standards, and technical guidance
- Support for audits, remediation, and incident response
Typical projects
Companies bring in a cybersecurity consultant for new platform rollouts, mergers, cloud migrations, or when security work is blocked by daily operations. A strong consultant can work with IT, infrastructure, application, and compliance teams without slowing delivery.
In Germany, this role is common in industrial firms, financial services, SaaS companies, healthcare, and regulated mid-market businesses. The consultant may join remotely for analysis and documentation, then come on-site for workshops, stakeholder interviews, or technical reviews.
Core skills
A good IT Security Consultant combines technical depth with clear communication. They need to explain risk in plain words, prioritize issues by business impact, and turn findings into practical actions.
- Network, endpoint, cloud, and identity security
- Security frameworks such as ISO 27001 and NIST
- Vulnerability management and hardening
- Secure design for applications and infrastructure
- Incident handling and remediation planning
Tools and methods
The right consultant knows the tools that fit the task, not just the tools on a checklist. Common work includes vulnerability scanners, SIEM and logging platforms, IAM reviews, firewall analysis, and policy or control documentation.
Many companies also look for an information security consultant who can support audits, define security controls, or prepare teams for external certification work. For cloud-heavy environments, experience with Azure, AWS, and Microsoft 365 security is often important.
What strong consultants deliver
A strong cybersecurity consultant leaves behind clear outputs that teams can use immediately. Good work is specific, documented, and realistic for the client’s environment.
- Prioritized findings with business impact
- Remediation plans and control owners
- Security concepts and technical recommendations
- Workshop notes and decision records
- Support during fixes, validation, and handover
When to hire freelance
Freelance security support makes sense when you need specialist knowledge for a defined scope, or when internal teams lack time to address a critical issue. It also works well for short audits, project-based hardening, temporary leadership, or extra help during a compliance deadline.
A security advisor on a freelance basis can join quickly, focus on the gap, and step out once the work is complete. That gives companies flexibility without committing to a permanent hire before the need is clear.
Meet FRATCH IT Security Consultants
Andreas Rühl
Principal Consultant Information Security
Last position:
Freelance Information Security Consultant at A-R-C Andreas Rühl Consulting
Development and implementation of tailored information security strategies
Introduction and further development of ISMS according to ISO 27001, BSI Baseline Protection, and other standards
Risk management and creation of security concepts
Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000
Building and improving security organizations
Creation and implementation of guidelines, policies, work instructions, and process descriptions
Audit support and certification preparation
Conducting training sessions, workshops, and awareness campaigns
Selection and consulting for the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies
Conducting penetration tests and vulnerability analyses
Consulting on the selection, integration, and management of security architectures in complex IT environments
Consulting on ITSM and managed security services and SOC
Leading and managing complex projects to improve information security
Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics
Introduction and quality assurance of management, documentation, and knowledge management systems
Support in meeting regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)
Development and implementation of risk analysis procedures
Organization of initial response, forensic investigations, and organizational measures in security incidents
Design and delivery of focused workshops on topics such as ISMS, IT risks, and current threat scenarios
Awareness campaigns to promote a security culture in companies
Special training on ISO 27001, BSI Baseline Protection, KRITIS, and other relevant standards
Simulations and exercises to prepare for information security incidents
Interim management for leading information security projects or IT security organizations
Taking on the role of an external CISO (Chief Information Security Officer)
Support in developing and implementing IT security and business strategies
Coaching and mentoring of managers in information security
Building and leading security departments as well as recruiting and qualifying employees
Temporary assumption of management responsibility in critical situations
Dirk Peter
Freelance Cyber Defense Lead & KRITIS/NIS2 Consultant | AI Security Architect
Last position:
Freelance Cyber Defense Lead & KRITIS/NIS2 Consultant | AI Security Architect at Self-Employed
Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.
Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.
Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.
Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.
Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.
Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.
Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.
Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.
Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.
Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.
Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.
Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.
Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.
Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.
Result: >99.5% uptime over 20+ years and zero compromises.
Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.
Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.
Hichem Blagui
IT Security Consultant & Data Engineer / Freelancer
Last position:
IT Security Consultant & Data Engineer / Freelancer at datadefend GmbH
- Analysis and further development of the security architecture.
- Design and development of Splunk apps and technical add-ons (TAs).
- Development and implementation of security use cases in the Splunk SIEM.
- Creation and maintenance of incident response playbooks in Cortex XSOAR.
- Support of technical proof-of-concepts to assess new detection technologies.
- Lifecycle management and operational support for Splunk and Cribl systems.
- Deployment and scaling of Splunk indexers in hybrid data center environments.
- Maintenance, update planning, and optimization of Cribl Stream & Edge for log ingestion and data routing.
- Creation of dashboards and reports to visualize security posture and system availability.
- Technical analysis to assess network topologies and data flows.
- Integration of new data sources via Cribl Stream/Edge and heavy forwarders in cloud and on-prem environments.
- Integration of external security components such as Cortex XSOAR (SOAR) and user behavior analytics (UBA).
- Implementation of complex correlation rules in Splunk Enterprise Security (ES).
- Connection of external ticketing systems via mail gateways and REST APIs.
- Automated deployment of use cases, dashboards, and detection rules via Git and Ansible.
Denis Fischer
IT Security Consultant
Last position:
IT Security Consultant at Logistikdienstleister
- Setting up a centralized security monitoring system (SIEM)
- Integrating and onboarding log sources (Windows, network, applications)
- Developing dashboards and alert structures
- Structuring data models for efficient analysis
Benno Zabel
Freelance Data Protection Officer
Last position:
Freelance Data Protection Officer at SUMTEC
- Drafting the data protection concept under EU GDPR including DPIA and implementing TOMs
Martin Frlička
IT Security Consultant
Last position:
IT Security Consultant at Freelance
Robert Vattig
Freelance Consultant Information Security and Business Continuity
Last position:
Freelance Consultant Information Security and Business Continuity at Freelance Business Consulting
- Provide consulting services nationwide in both private and public sectors
- Advise on information security management systems, IT Baseline Protection, KRITIS compliance, TISAX, business continuity and crisis management
- Support introduction of policies, risk management methods, asset registers and supplier management
- Conduct internal audits, training workshops and support audit preparations
Ali Mohandeszada
Consultant Information Security, Data Protection, Process Management and AI Compliance
Last position:
Consultant Data Protection and Process Management at O.D.S. Consulting GmbH
- Documenting data protection processes
- Creating a process-relevant deletion handbook
- Developing deletion concepts including critical business processes
- Reviewing the newly created data protection policy
- Setting up a deletion plan for GDPR-compliant deletion within the company
- Creating the record of processing activities
- Technology: MS Office 365, Camunda Modeler, Audatis
Sven Thiele
IT Security Consultant – Creation & Management of the IT Security Roadmap
Last position:
IT Security Consultant – Creation & Management of the IT Security Roadmap at Diehl Aviation
- Analyze and structure specific IT security requirements
- Build a structured requirements backlog as a basis for the sub-group’s IT security initiatives (including separation from group-wide programs)
- Conduct a systematic delta comparison with group-wide IT security requirements to identify open needs and dependencies
- Develop a multi-level IT security roadmap including implementation and project planning, aligned with internal and external stakeholders
- Provide professional project management at the program level, including status analysis, risk management, action tracking, and goal control
- Coordinate internal departments and external service providers, including communication planning and managing regular status meetings
Phil Eicke
Principal Cybersecurity Consultant
Last position:
Principal Cybersecurity Consultant at SC&E Advisory GmbH
- Development of compliance products
- Senior Cybersecurity Consultant: NIS2: impact assessment, obligations, action planning, roadmaps
- NIS2 · DORA · CRA
- Design of ISO 27001 ISMS implementation project on a fixed-price basis
- Governance consultancy in M&A situations
Daniel Jüntgen
Information Security Consultant
Last position:
Information Security Consultant
- Enhanced quality assurance of documents, processes and required evidence in preparation for the upcoming KRITIS audit 2025.
- Reviewing and commenting on all relevant documents.
- Advising authors and document owners on inquiries and during the creation process.
- Supporting departments with IT security inquiries.
- Used tools/Frameworks MS Office, SharePoint, Jira, Confluence, ISO27001+, NIS-2 (EU 2022/2555), B3S (Statutory Health & Private Health Insurance), BSIG / IT-SIG 2.0, BSI-KritisV, BSI-C5, BSI Baseline Protection (200-2, 200-4), ServiceNow, RCE (EU 2022/2557), SGB, GDPR
Manfred Liebetrau
Senior Consultant Information Security
Last position:
Senior Consultant Information Security at Creditplus Bank AG
- Designing the information security process based on ITIL 4
- Designing the ITIL 4 incident and change management processes
- Creating information security policies for the bank
- Support in the project for internal audit findings
- Advising on the setup of the bank's internal control systems (ICS)
- Advising on setting up ICS processes
- Advising and supporting security architecture and risk analysis of the existing IT landscape, including IT security architecture, data management, data compliance & physical security
- Advising and project leadership for the security concept of the bank's assets
- Advising and support in contracts with external service providers to meet the bank's regulatory (BAIT; MaRisk; DORA; NIS2; GDPR) and information security requirements
- Support in planning and implementing a SOC/SIEM and risk management
- Support for the spam email team in analyzing and handling incidents
Szabolcs Kardos
Senior Network Security Consultant
Last position:
Senior Network Security Consultant at Mann+Hummel
- Network segmentation in a production IT environment
- Firewall migrations
- Integration of remote access sites
- Implementation of POCs (Backup, SCADA)
- Working in a multicultural environment
- Applied technologies: Panorama & Palo Alto Firewalls, Checkpoint, ServiceNOW, MS Azure Cloud
Burkhard Hinz
Consultant for Data Protection, AI, Compliance and Organizational Development
Last position:
Consultant for Data Protection, AI, Compliance and Organizational Development
- Set up automated processes in data protection management (e.g. ROPA, PIA, DPIA)
- Complete overhaul of data subject rights processes (erasure, access, etc.)
- Development of a data and AI compliance management system
- Support in setting up a data governance framework
- Establishment and support of agile project management
- Support in the strategic realignment of the privacy department
Andreas Guthier
IT Security Consultant
Last position:
IT Security Consultant at Nuremberg Authority
- Quality assurance of information security documentation
- Advising and coaching departments in creating information security documentation
- Analysis and documentation of information security for various basic services
- Maintaining data in the ISMS
- Identifying vulnerabilities
- Coordinating and tracking vulnerability remediation
- Clarifying data protection questions
- Data protection impact assessment
- Conducting internal IT security audits (review)
- Supporting audit preparation (maturity audit, BSI/ISO 27001 audit, KRITIS audit)
Discover over 15,000 top freelancers
IT Security Consultants statistics
Typical experience
18 years
Average project duration
2.6 years
Certifications per freelancer
9
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Professional Services, Banking and Finance
Most common languages
German, English, French
Bachelor's degree or higher
90%
Master's degree or higher
60%
Doctorate
10%
Salary / Daily Rate Distribution
The chart shows how the daily rates of freelancers in this role are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Average rates for IT Security Consultants & Seniority distribution
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Frequently Asked Questions
Got questions? Learn key details about FRATCH right now
An IT Security Consultant reviews risks, identifies gaps, and helps teams improve technical and organisational security. That can include architecture reviews, hardening, policy work, vulnerability management, and support during incidents or audits. The exact scope depends on whether the client needs strategic advice, hands-on implementation, or both.
A strong IT Security Consultant needs technical depth in networks, identity, endpoints, cloud, and logging, plus the ability to explain risk clearly. Experience with security frameworks, remediation planning, and stakeholder workshops is also important. The best consultants can move between technical detail and business impact without losing either side.
A cybersecurity consultant usually has a broader advisory role than a security engineer. They assess risk, shape security measures, support audits, and guide decisions across teams, while a security engineer often focuses more on building and operating specific controls. In many projects the two roles overlap, but the consultant is typically the one framing the problem and priorities.
Freelance IT Security Consultants are a good fit when the need is project-based, urgent, or highly specialised. Companies often choose this route for audits, cloud migrations, incident recovery, or temporary coverage while a permanent role is still being defined. It is also useful when the internal team needs outside judgment on an existing setup.
Yes, an information security consultant can handle much of the work remotely, especially reviews, documentation, and interviews. On-site time is still useful for workshops, technical validation, and discussions with IT, operations, or management. In Germany, many clients prefer a mix of remote and on-site collaboration depending on the sensitivity of the environment.
A good IT Security Consultant should leave behind clear, usable output. That usually means a risk assessment, a prioritized findings list, remediation guidance, and supporting documentation such as security concepts or control mappings. For regulated clients, the consultant may also prepare audit evidence or help close findings with the internal team.
Ask how the security advisor has handled similar environments, what concrete deliverables they produce, and how they approach prioritisation. Good signs are clear thinking, realistic recommendations, and the ability to explain trade-offs without jargon. If the consultant can quickly identify the real risk areas and suggest workable next steps, that is a strong signal.
In Germany, IT Security Consultants are often brought into industrial companies, financial services, healthcare, software firms, and regulated mid-market businesses. These organisations usually face a mix of technical risk, audit pressure, and internal resource limits. The consultant must understand both the technology and the local business context to be effective.
Request a Free Demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
